14.12.2012 Views

Junos OS Interfaces Configuration Guide for ... - Juniper Networks

Junos OS Interfaces Configuration Guide for ... - Juniper Networks

Junos OS Interfaces Configuration Guide for ... - Juniper Networks

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

<strong>Junos</strong> <strong>OS</strong> <strong>Interfaces</strong> <strong>Configuration</strong> <strong>Guide</strong> <strong>for</strong> Security Devices<br />

22<br />

The following details apply to the configuration statements:<br />

• You assign each template a unique name by including the template name statement.<br />

• You then specify each template <strong>for</strong> the appropriate type of traffic by including the<br />

ipv4-template, ipv6–template, inet-ipv4-template, inet-template, or<br />

peer-as-billing-template.<br />

• If the template is used <strong>for</strong> inet traffic, you can also specify up to three label positions<br />

<strong>for</strong> the inet header label data by including the label-position statement; the default<br />

values are [1 2 3].<br />

• Within the template definition, you can optionally include values <strong>for</strong> the<br />

flow-active-timeout and flow-inactive-timeout statements. These statements have<br />

specific default and range values when they are used in template definitions; the default<br />

is 60 seconds and the range is from 10 through 600 seconds. Values you specify in<br />

template definitions override the global timeout values configured at the [edit<br />

<strong>for</strong>warding-options sampling output flow-server] hierarchy level.<br />

NOTE: In active flow monitoring, the flow-server records are exported after<br />

a time period that is a multiple of 60 seconds and greater than or equal to<br />

the configured active timeout value. For example, if the active timeout<br />

value is 90 seconds, the flow-server records are exported at 120-second<br />

intervals. If the active timeout value is 150 seconds, the flow-server records<br />

are exported at 180-second intervals, and so <strong>for</strong>th.<br />

• You can also include settings <strong>for</strong> the option-refresh-rate and template-refresh-rate<br />

statements within a template definition. For both of these properties, you can include<br />

a timer value (in seconds) or a packet count (in number of packets). For the seconds<br />

option, the default value is 60 and the range is from 10 through 600. For the packets<br />

option, the default value is 4800 and the range is from 1 through 480,000.<br />

• To filter IPV6 traffic on a media interface, the following configuration is supported:<br />

interfaces interface-name {<br />

unit 0 {<br />

family inet {<br />

sampling {<br />

input;<br />

output;<br />

}<br />

}<br />

}<br />

}<br />

Copyright © 2011, <strong>Juniper</strong> <strong>Networks</strong>, Inc.

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!